Implicit certificate key generation method based on SM2 digital signature

Abstract

The invention discloses an SM2 digital signature-based implicit certificate key generation method, which mainly solves the problem that a user identity cannot correspond to a user public key in a public key cryptosystem in the prior art. According to the scheme, system parameters are set and initialized according to a standard cryptographic algorithm SM2; the certificate authority CA generates a key pair and sends a public key PCA to a user usr applying for a certificate; the user applying for the certificate generates a temporary key pair and sends an identity identifier IDA and a temporary public key X of the user to a certificate authority CA; the CA generates an implicit certificate cert and a signature s, and sends the cert and s to a user applying for the certificate; and the user generates a complete public key U and then verifies the complete public key U and the signature s to obtain a complete public and private key pair (u, U). The method conforms to the national cryptographic SM2 signature algorithm standard, is high in operation efficiency and short in bandwidth overhead, reduces the risk that a man-in-the-middle replaces a public key, and can be used for a resource-limited Internet of Things environment.

Description

technical field [0001] The invention belongs to the technical field of information security, and in particular relates to an implicit certificate key generation method, which can be used in an Internet of Things environment with limited resources, unifies the relationship between user identity and user public key, and realizes public key authentication. Background technique [0002] In the public key cryptography system, a user has two keys, public key and private key. Among them, the public key is open to anyone. Anyone who obtains the public key can use the public key to encrypt the message. The encrypted ciphertext can then be sent to the recipient through an open channel. Only the recipient who has the private key corresponding to the public key can correctly decrypt the ciphertext and recover the plaintext information. Typical public key encryption systems include RSA system, ELGamal system, and Gramer-Shoup system with high security. [0003] A key problem with this ...

AI Technical Summary

Problems solved by technology

But the problem with IBC itself is that although the identity is a meaningful string, if the identity information is entered incorrectly during encryption, it may also cause the receiver to fail to decrypt

However, the ECQV implicit certificate protocol has a certificate misbinding attack, and in terms of computing speed, it cannot accelerate the generation of user public keys in the ECQV implicit certificate protocol by precomputing and storing data operations.

Images